ClickFix leads detections as fake AI-tool installs deliver malware
Original title: ClickFix has never been bigger, and AI tools are its most convincing lure yet
Push says four in five intercepted ClickFix pages in 2026 were reached from search engines, not email.
Push reports ClickFix averaged 52 percent of its detections in Q2 2026 and 67 percent in August, ahead of adversary-in-the-middle and device-code phishing. AI-themed InstallFix and LLMshare lures impersonate tools such as Claude, ChatGPT, and Codex, often via search ads and shared chats. Fake install pages show a real command while the copy button places a different command that pipes a downloaded script into the shell. A malicious custom GPT Push analyzed had more than 10,000 conversations and linked users to a Windows ClickFix page.
Unconfirmed: Detection shares are Push's figures; ANY.RUN's sandbox counts cover public analyses only.
- ANY.RUN tied 1,258 sandbox analyses to fake AI-tool campaigns from April 15 to October 5.
- Eighty-one percent of those analyses impersonated Claude, ChatGPT, or Codex.
- A sponsored result for "claude mac" displayed bing.com and redirected through a compromised retail site.
- Cloaking sent visitors who did not arrive via the ad to a benign page or a 404.
- LLMshare lures are hosted on chatgpt.com, claude.ai, or Google Sites.
Impact: Users run a swapped install command that downloads and executes malware
- 1.Compare clipboard contents with the command shown on AI install pages before pasting.
- 2.Treat search-ad results and shared AI chats that request a terminal install as untrusted.
- Products
- CodexClaude Code
- Malware
- ClickFixInstallFixLLMshare
- Organizations
- Push SecurityANY.RUN
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | claude.ai | nd on the clipboard. That command first prints a legitimate claude.ai URL in the Terminal, then decodes a hidden URL and pipes th |
From the original article
7 min read at bleepingcomputer.com
ClickFix attacks are surging as cybercriminals use fake AI installers, malicious search results, and trusted chatbot platforms to trick users into executing malware. Push Security examines how these attacks evade traditional defenses and why AI tools have become increasingly effective lures. [...]
By Sponsored by Push Security · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.